← Back to feed
178.128.205.47
ssh-scan-0.io.internetdata.io
(internetdata.io)
✓ FCrDNS
Assessment
Port and service scanner
- Part of a 282-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
8
Average by volume
Agent Count
2
First / Last Seen
2026-10-12 22:35 — 2026-10-13 01:39
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
117 IPs
388827 events
2026-10-09 — ongoing · 117 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
157 IPs
592841 events
2026-10-01 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
183 IPs
557547 events
2026-09-24 — ongoing · 183 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
40 IPs
132466 events
2026-09-24 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
158 IPs
588822 events
2026-09-24 — ongoing · 158 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
181 IPs
663453 events
2026-09-14 — ongoing · 181 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
2 IPs
452 events
2026-09-14 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
206 IPs
503789 events
2026-09-11 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
202 IPs
779894 events
2026-09-10 — ongoing · 202 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
197840 events
2026-08-13 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
166 IPs
735229 events
2026-07-04 — ongoing · 166 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
190 IPs
795361 events
2026-06-29 — ongoing · 190 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
132 IPs
315378 events
2026-06-25 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
219 IPs
867626 events
2026-03-09 — ongoing · 219 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
175 IPs
600286 events
2026-03-09 — ongoing · 175 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
282 IPs
1038944 events
2026-03-09 — ongoing · 282 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
196 IPs
873931 events
2026-03-09 — ongoing · 196 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
247 IPs
874212 events
2026-03-09 — ongoing · 247 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
231 IPs
776924 events
2026-03-09 — ongoing · 231 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
157 IPs
474956 events
2026-03-09 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
259 IPs
941060 events
2026-03-09 — ongoing · 259 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
137 IPs
542358 events
2026-03-09 — ongoing · 137 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
141476 events
2026-02-25 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
211 IPs
849686 events
2026-02-24 — ongoing · 211 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
225 IPs
735747 events
2026-02-24 — ongoing · 225 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH e54ef3ec27fe… — SSH-2.0-Go (50 IPs, 9 countries)
HASSH
Active
high
🇺🇸 US
50 IPs
55225 events
http:scanssh:bruteforcessh:connectionssh:intrusiontelnet:connection
2026-02-22 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint e54ef3ec27fe…). Top network: Microsoft Corporation (AS8075). Geographic and …
Session Forensics
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
SSH Client
Evidence Timeline